Jetbox One Remote Server-Side Script Execution Vulnerability

Bugtraq ID:	10859
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 04 2004 12:00AM
Updated:	Aug 04 2004 12:00AM
Credit:	Ahmad Muammar <[email protected]> disclosed this vulnerability.
Vulnerable:	Jetbox Jetbox One CMS 2.0.8
Not Vulnerable:

Jetbox One Remote Server-Side Script Execution Vulnerability

A vulnerability is reported to exist in Jetbox One that may allow a remote attacker to execute malicious scripts on a vulnerable system.

It is reported that an attacker may be able to place server side scripts in directories that could be accessed and executed later.

Successful exploitation of this issue may allow an attacker to execute malicious script code on a vulnerable server.

Version 2.0.8 is reported vulnerable to this issue. Other versions may also be affected.

Jetbox One Remote Server-Side Script Execution Vulnerability

No exploit is required.

Jetbox One Remote Server-Side Script Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Jetbox One Remote Server-Side Script Execution Vulnerability

References:

• Jetbox One CMS Home Page (Jetbox)
  
• vulnerabilities in JetboxOne CMS (ahmad muammar )